© 2026 Mohammad Alghrawe

Privacy Policy

Last updated: March 3, 2026

1. Controller

The controller responsible for data processing on this website is:

Mohammad Alghrawe
Switzerland
Email: hello@alghrawe-mohammad.com

2. Data We Collect

This website collects minimal personal data. We process the following information only when you voluntarily interact with our services:

2.1 Google Sign-In (Rating & Comments)

When you sign in with your Google account to leave a rating or comment, we collect and store only:

  • Your Google display name
  • Your Google profile photo URL
  • Your rating (1–5 stars) and optional comment text
  • A timestamp of when you gave consent

We do not collect your email address, Google account ID beyond an opaque identifier, or any other personal data from your Google account.

2.2 Contact Form

When you submit the contact form, we process your name, email address, and the message content solely to respond to your inquiry. This data is not stored in a database and is used only for the purpose of replying to you.

2.3 Server Logs

Our web server automatically collects standard access logs (IP address, browser type, pages visited, timestamps) for security and debugging purposes. These logs are automatically deleted after 30 days.

3. Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR / Art. 31(1) nFADP): When you sign in with Google and leave a rating, you explicitly consent to the processing of your name and profile photo.
  • Legitimate interest (Art. 6(1)(f) GDPR / Art. 31(1) nFADP): Server logs are processed for security and the proper operation of this website.
  • Contract performance (Art. 6(1)(b) GDPR): Contact form data is processed to respond to your inquiry.

4. Data Sharing & Third Parties

We do not sell, trade, or share your personal data with third parties, except:

  • Google OAuth: The authentication process involves Google's OAuth 2.0 service. Google's privacy policy applies to their processing of your Google account data. We only receive the minimal profile data described above.
  • Hosting provider: This website is hosted on a VPS by Hostinger. Standard server logs may be processed by the hosting infrastructure.

5. Data Retention

  • Ratings & comments: Stored as long as the associated project exists on this website, or until you request deletion.
  • User profile data (name, photo): Stored as long as you have an active rating on this website, or until you request deletion.
  • Contact form data: Not stored persistently; processed only to send a reply.
  • Server logs: Automatically deleted after 30 days.

6. Your Rights

Under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP), you have the following rights:

  • Right of access: You may request information about the personal data we hold about you.
  • Right to rectification: You may request correction of inaccurate personal data.
  • Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will delete your user profile, ratings, and comments upon request.
  • Right to data portability: You may request your data in a machine-readable format.
  • Right to withdraw consent: You may withdraw your consent at any time by contacting us.
  • Right to lodge a complaint: You may file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.

To exercise any of these rights, please contact us at hello@alghrawe-mohammad.com.

7. Cookies

This website uses only essential cookies required for authentication (session cookies for Google sign-in and admin access). We do not use any tracking cookies, analytics cookies, or advertising cookies.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS/TLS), secure password hashing, and access controls.

9. International Data Transfers

The Google OAuth process may involve data transfers to Google servers outside of Switzerland/EEA. Google provides appropriate safeguards under Standard Contractual Clauses (SCCs) as approved by the European Commission.

10. Changes to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this page periodically.

11. Contact

If you have any questions about this privacy policy or our data practices, please contact us at:

Mohammad Alghrawe
Email: hello@alghrawe-mohammad.com